
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier: E0MpG+JryAYNe3IjdG6EM2cOcX6iWsoGEJHkPKjSrpo=
Subject key identifier: 43:9C:77:76:66:E7:F2:DF:B2:E8:4C:95:A5:F6:63:39:E6:7F:7B:D8
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 0665
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number: 0638
Signing time: Thu 16 Apr 2026 22:48:19 +0000
Manifest this update: Thu 16 Apr 2026 22:48:19 +0000
Manifest next update: Thu 23 Apr 2026 22:48:19 +0000
Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: tTj41u5zlZJSdUSTQzjhG+fYeGmFWt/Z5jmgaF3TqZs=)
2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: leZ0cCoOlR1k5yKepuZNpVBVHzz4KHAcvcnF8Cllio0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Apr 16 22:48:19 2026 GMT
Not After : Apr 23 22:48:19 2026 GMT
Subject: CN=69e16733-6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:17:e6:02:3f:11:ce:95:96:82:ec:87:eb:
a6:f8:d2:28:a9:3f:f5:39:2c:a3:ef:b6:79:c8:17:
03:18:96:46:3c:a2:52:7e:f9:96:62:f8:65:7a:00:
36:d7:32:aa:cf:bb:26:5d:85:57:15:4c:02:71:9f:
76:02:bf:aa:d3:85:05:f1:49:5f:36:a0:2f:34:87:
b7:38:db:74:c1:a9:65:24:4d:8e:26:ea:9e:3e:1b:
5c:39:31:1d:fe:c2:0b:c2:6c:7c:46:fd:a0:43:65:
f4:07:27:28:c9:d1:0b:f2:a1:79:7f:7a:a3:b2:db:
25:9a:a3:a0:ce:84:e3:bc:40:df:63:88:ea:4d:45:
37:59:22:20:06:f9:fa:da:0d:35:f3:04:ad:b4:61:
a6:6d:9a:ea:98:7e:99:b8:61:07:dd:d9:a1:cb:2e:
1d:0f:8b:19:c2:2a:56:81:a2:8a:1c:3b:3c:c7:16:
d0:45:43:b1:93:4d:8e:6a:48:22:9f:b1:7c:d8:90:
e5:46:85:5e:b1:7f:ed:34:9d:c7:c3:fe:cc:76:32:
ba:e7:b8:47:7b:bf:28:c1:f7:c1:e9:81:87:c1:85:
61:4d:13:dd:0e:ba:65:d7:ec:2a:65:c9:41:79:b0:
3a:52:ac:01:ff:dc:16:73:ff:81:f0:6c:22:07:60:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:77:76:66:E7:F2:DF:B2:E8:4C:95:A5:F6:63:39:E6:7F:7B:D8
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:39:77:65:18:8f:b5:ac:e1:30:e2:51:48:65:9f:6e:72:
91:89:e1:18:75:9b:73:b9:9d:82:45:06:71:16:f8:72:cf:bd:
6e:ce:8b:19:71:0f:75:0d:58:58:7c:72:83:06:ff:59:19:ad:
66:e8:72:17:ee:7d:00:fa:69:53:bb:ab:85:dd:62:83:8e:f3:
2d:c6:b7:6e:71:65:80:68:93:51:81:22:30:8f:c5:37:5d:eb:
36:1b:7f:4c:97:9f:67:50:4e:39:04:0a:8a:4d:cd:64:68:6a:
2e:ef:8f:b5:50:60:2e:18:8e:b8:1c:ac:91:53:ed:77:75:c4:
40:d5:7d:e4:af:be:4c:04:92:2f:dc:fb:c8:46:cc:30:0a:a3:
f1:6d:82:cc:f9:84:b8:3f:a2:72:82:39:45:f4:8c:3f:ce:37:
a2:f9:ff:0b:90:1b:c4:a4:d7:fd:88:50:90:78:f8:73:db:f6:
d3:c4:1c:9b:ae:1c:28:bc:9b:dc:a5:54:ba:b2:4d:63:16:89:
4e:07:4f:b8:cc:d5:0b:62:d6:b3:a6:53:ee:f7:87:f1:e1:67:
9d:96:a1:84:b8:d8:3b:04:4a:98:79:f2:3b:33:8a:af:e6:b5:
ab:7e:f0:0d:c9:f6:81:f2:e4:e9:f9:bc:50:78:c1:76:c3:88:
ac:19:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:26 2026 by rpki-client